Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TdW81gbndKE-b0VpAxMtsyva_VA.roa
File: TdW81gbndKE-b0VpAxMtsyva_VA.roa (raw, json)
Hash identifier: gU8sjC42baJYQgjRtY8wWlbNARn52ZBJpDeSgtooYOk=
Subject key identifier: 4D:D5:BC:D6:06:E7:74:A1:3E:6F:45:69:03:13:2D:B3:2B:DA:FD:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895C7AAEF413A7C27D97A3AB1C414AC994
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TdW81gbndKE-b0VpAxMtsyva_VA.roa
Signing time: Sun 16 Jul 2023 02:14:51 +0000
ROA not before: Sun 16 Jul 2023 02:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5c:7a:ae:f4:13:a7:c2:7d:97:a3:ab:1c:41:4a:c9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 02:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dd5bcd606e774a13e6f456903132db32bdafd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:19:7b:6c:10:10:7e:3c:02:93:92:ba:36:
80:ff:c5:d6:5a:51:a0:16:05:61:5f:aa:3b:1a:0b:
9d:4f:db:73:72:60:3b:57:6b:7e:06:b5:78:00:45:
ff:70:a3:ad:51:0f:61:db:9c:d6:d6:a5:69:1a:74:
19:0d:dc:ae:20:39:f3:2e:25:5d:3a:b3:99:14:5b:
8a:ee:ca:01:47:f4:06:04:1f:73:9c:82:c8:61:ea:
da:80:35:fd:fa:e5:34:be:18:be:79:1c:b5:4a:03:
0d:5d:4c:d0:2f:7d:bd:44:f1:48:6d:a8:cc:49:ed:
eb:d2:ed:2a:08:03:36:05:55:dd:59:cd:1c:bb:3d:
db:f4:ef:6e:74:23:1a:92:8f:24:e2:c8:9b:5d:08:
50:ec:d5:54:0f:ba:e0:f7:8b:08:97:bf:a3:d2:3a:
b2:00:be:b2:7f:be:9d:63:c9:d3:5b:db:c3:9c:04:
37:d0:f1:ea:5c:cd:5d:5c:51:54:12:86:b2:23:09:
fe:9b:67:27:40:eb:86:f4:af:df:86:46:43:78:bb:
e0:59:d4:96:a7:20:bf:ac:8d:e4:9f:3b:88:4d:cb:
b7:41:93:b2:de:4e:b5:cf:3e:6f:42:45:2e:11:74:
79:c3:22:e3:ef:c0:a2:73:c8:33:7f:25:72:47:77:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D5:BC:D6:06:E7:74:A1:3E:6F:45:69:03:13:2D:B3:2B:DA:FD:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TdW81gbndKE-b0VpAxMtsyva_VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:ea:b6:64:e7:a0:2d:64:a5:82:4f:9f:e2:63:f7:3c:a9:44:
05:2f:fd:82:a1:ba:91:01:d1:74:7b:34:fd:71:18:eb:c8:74:
44:59:1c:c7:17:8f:71:af:7b:03:4f:23:12:22:5b:6e:c6:2c:
5d:5a:9f:17:fe:68:73:62:80:74:20:86:4a:63:32:eb:d2:9c:
34:29:4b:6e:a1:47:9c:61:e6:18:85:76:cf:46:b6:86:41:43:
5d:08:79:8e:75:4d:86:42:32:1c:4b:82:c3:9d:aa:96:bf:c2:
35:21:01:62:fc:f7:4c:1a:50:9d:25:c3:fb:e2:4d:7b:8c:bc:
87:ec:a1:ca:0f:a7:08:af:75:4d:24:cb:fa:1d:28:52:84:7f:
6b:99:09:07:be:ce:e4:3d:93:b4:78:4c:d7:58:37:9a:c3:af:
4c:97:cc:df:27:37:ca:af:b7:8f:ee:bc:36:b0:33:60:74:d2:
44:f7:26:5f:92:a8:70:76:c5:b6:9c:9c:8d:89:9f:d5:d1:89:
21:6e:7d:90:d8:63:0e:4c:a1:43:ef:17:46:1b:68:ca:7c:84:
f3:f7:5f:0b:21:49:10:55:c1:f4:c2:33:c0:ff:e5:90:2e:54:
4c:61:d0:ea:04:1d:0f:48:19:75:2e:da:0a:2b:bb:c8:d4:92:
09:cb:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:01:53 2025 by rpki-client